Tip #1: Use non-numeric usernames

[system]

From “Asterisk™: The Definitive Guide” - Chapter 26 - Security:
ofps.oreilly.com/titles/97805965 … urity.html

Tip #1: Use non-numeric usernames for your VoIP accounts to make them harder to guess. For example, in parts of this book we use the MAC address of a SIP phone as its account name in Asterisk.

From blogs.digium.com/2009/03/28/sip-security/ :

Make your SIP usernames different than your extensions.

How can digium make such statements and distribute a GUI which is in clear violation of the stated security principles ?

–

Originally posted in the write-only part of the forum: viewtopic.php?t=79021
Reposted in Asterisk General to allow comments

[gnu]

Follow me: “USE PURE COMMANDS AND DON’T CARE ABOUT ANYTHING EVER!”

[malcolmd]

How have you not submitted any patches to correct the things with which you take issue?

How can I convince you to crank out code in addition to your forum posts?